| Package | Affected versions | Patched versions |
|---|---|---|
| pfsense | = 2.8.0 |
In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal. NOTE: the Supplier's perspective is that this is intended behavior for this privilege level, and that system administrators are informed through both the product documentation and UI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free